[mapserver-commits] [MapServer/MapServer] 3c3c9b: Use CPLSetConfigOption/CPLGetConfigOption for some...
Steve Lime
noreply at github.com
Fri Apr 30 13:15:45 PDT 2021
Branch: refs/heads/branch-7-0
Home: https://github.com/MapServer/MapServer
Commit: 3c3c9b3934f42808c15957f9378dec904203228d
https://github.com/MapServer/MapServer/commit/3c3c9b3934f42808c15957f9378dec904203228d
Author: Seth G <sethg at geographika.co.uk>
Date: 2021-04-30 (Fri, 30 Apr 2021)
Changed paths:
M maphttp.c
M mapserv.c
M mapserv.h
M mapservutil.c
Log Message:
-----------
Use CPLSetConfigOption/CPLGetConfigOption for some CGI/FastCGI-related env vars (#6305)
Push a few high-value env vars into CPL config and then reference that instead of the env (mostly for IIS/FastCGI).
Commit: 82a3eb5f6c8f75cedd095b909cc4990f3d8a99e1
https://github.com/MapServer/MapServer/commit/82a3eb5f6c8f75cedd095b909cc4990f3d8a99e1
Author: Steve Lime <steve.lime at state.mn.us>
Date: 2021-04-30 (Fri, 30 Apr 2021)
Changed paths:
M mapfile.c
M mapserv.c
M mapserver.h
M mapservutil.c
Log Message:
-----------
Address flaw in CGI mapfile loading that makes it possible to bypass security controls (#6313) (#6314)
* Create coverity-scan.yml
* Update coverity-scan.yml
* Avoid resource leak... (CID 1503409)
* Revert "Avoid resource leak... (CID 1503409)"
This reverts commit 7d261af86140a491df170ba7054aa9d1aa9f3ad7.
* Updated...
* Limit action to MapServer/MapServer repo, run every Sunday (for now).
* Always force map parameter values through validation checks. Add validation checks on environment variable names.
* msIsValidRegex(): fix memleak
Co-authored-by: Even Rouault <even.rouault at spatialys.com>
Compare: https://github.com/MapServer/MapServer/compare/7e36981948cb...82a3eb5f6c8f
More information about the mapserver-commits
mailing list